Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/ns9Iu925uNPqm9SyfjZghoXo_D0.roa
File: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (raw, json)
Hash identifier: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=
Subject key identifier: 9E:CF:48:BB:DD:B9:B8:D3:EA:9B:D4:B2:7E:36:60:86:85:E8:FC:3D
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 019425FD919D354461F73EFB7326DB12B977
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/ns9Iu925uNPqm9SyfjZghoXo_D0.roa
Signing time: Thu 02 Jan 2025 07:49:22 +0000
ROA not before: Thu 02 Jan 2025 07:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35266
IP address blocks: 193.46.61.0/24 maxlen: 24
193.104.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:91:9d:35:44:61:f7:3e:fb:73:26:db:12:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Jan 2 07:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ecf48bbddb9b8d3ea9bd4b27e36608685e8fc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:04:16:9b:50:7e:94:5c:db:2e:8f:b7:cd:
01:58:e7:9a:ba:d0:21:9a:80:51:cf:44:ce:a2:bd:
b9:45:5e:c1:3f:ed:9d:5a:74:d0:7e:0e:08:5c:d8:
d0:16:e2:ce:55:61:b5:20:fe:0a:61:eb:bb:9c:42:
7a:49:d4:ea:60:61:92:a0:08:b0:55:65:61:01:3b:
00:95:fc:c1:d3:4c:a5:3e:94:28:71:f4:03:84:2a:
d5:7b:a1:87:78:e7:49:17:35:54:d8:ce:c3:e3:b2:
3b:08:26:62:9b:d7:70:6f:62:fa:32:37:bd:e4:2d:
f5:fd:a9:9e:a9:12:51:ef:00:0e:39:f4:e8:68:80:
44:21:be:2c:3e:75:9c:1c:fe:cd:5f:d0:dc:36:96:
70:fd:81:f9:af:da:a6:a8:6d:a4:dd:a8:d3:0f:66:
99:5d:95:4f:6b:1a:c8:16:39:7e:21:6c:ec:d2:28:
e6:dc:f7:af:7c:04:64:a7:4f:c9:78:9b:04:e2:64:
d9:c6:16:41:da:ec:4f:19:02:b1:dc:07:3d:eb:34:
7d:f6:fe:8c:fc:21:c0:ab:56:40:a7:3e:3c:d4:09:
d9:9d:7f:0a:bf:b1:88:1f:10:24:b9:d4:3f:ac:7b:
c3:14:2d:a9:e0:56:c1:97:21:be:cd:45:09:ec:3c:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:48:BB:DD:B9:B8:D3:EA:9B:D4:B2:7E:36:60:86:85:E8:FC:3D
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/ns9Iu925uNPqm9SyfjZghoXo_D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.61.0/24
193.104.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c7:ee:f8:75:87:35:54:0d:e3:58:ea:7a:fb:16:46:8c:74:
c0:99:b5:39:d3:bc:8e:17:dd:1f:70:05:a9:63:b4:2b:ba:85:
8e:3b:58:a5:86:f5:ca:0b:ba:b6:bd:da:24:31:aa:bc:78:8f:
83:1b:1a:98:28:be:69:3e:4e:27:f8:7e:6b:e0:1a:18:0c:41:
4d:4e:df:89:b4:b9:95:e9:1d:da:f5:8c:21:ed:19:ac:31:28:
99:3b:dc:1e:f0:d7:cb:50:eb:b5:c1:0a:1f:f7:ac:e2:e1:7a:
fb:46:c1:8a:24:00:d9:e2:65:c0:6e:41:66:e9:07:fc:66:0d:
8f:54:4e:f8:bb:e9:ac:6d:cc:d4:d3:e6:25:4b:01:7d:62:38:
2f:4c:ca:29:a1:0c:40:c1:0f:b4:3e:dd:99:69:04:06:b6:3a:
14:23:4b:e4:e2:0d:69:35:c6:ac:21:dc:87:c9:3c:cf:a4:4e:
57:f0:aa:03:d4:c2:b0:2d:76:58:f4:bc:42:24:3f:e2:98:76:
af:6a:fb:9f:44:11:21:75:64:07:4d:af:42:3f:dc:6c:60:46:
55:c3:20:a8:ee:af:05:f7:5c:b1:ad:7c:9f:87:6a:c1:dd:17:
5e:6d:70:1f:b8:37:df:72:72:49:77:5f:f8:20:c3:6f:67:79:
e4:27:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:45 2025 by rpki-client